Re: [ovs-dev] [PATCH] ipsec: install iptables rules that set IPsec bit in skb mark

2014-01-21 Thread Ansis Atteka
On Tue, Jan 21, 2014 at 11:14 AM, Gurucharan Shetty wrote: > On Mon, Jan 20, 2014 at 5:55 PM, Ansis Atteka wrote: >> Without these two iptables rules (one for UDP encapsulated IPsec and >> another for direct IPsec), ovs-vswitchd would incorrectly conclude >> that GRE packet belonged to a plain GR

Re: [ovs-dev] [PATCH] ipsec: install iptables rules that set IPsec bit in skb mark

2014-01-21 Thread Gurucharan Shetty
On Mon, Jan 20, 2014 at 5:55 PM, Ansis Atteka wrote: > Without these two iptables rules (one for UDP encapsulated IPsec and > another for direct IPsec), ovs-vswitchd would incorrectly conclude > that GRE packet belonged to a plain GRE tunnel instead of IPsec GRE > tunnel. > > Reported-by: Aryan Ta

[ovs-dev] [PATCH] ipsec: install iptables rules that set IPsec bit in skb mark

2014-01-20 Thread Ansis Atteka
Without these two iptables rules (one for UDP encapsulated IPsec and another for direct IPsec), ovs-vswitchd would incorrectly conclude that GRE packet belonged to a plain GRE tunnel instead of IPsec GRE tunnel. Reported-by: Aryan TaheriMonfared Reported-by: Daniel Hiltgen Signed-off-by: Ansis A